en
StealC v1StealC v2StealC (also known as StealC v1 and StealC v2) is an information-stealing malware family. StealC targets browser credentials, cryptocurrency wallets, Telegram/Discord session tokens, FTP, email, VPN, RDP client configs and Custom file grabber configurable per-build. As of 11/10/2026, CyStack's research records 3 variants, with high attribution confidence.
Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes
Original English
StealC info-stealer logs. Writes a sectioned system_info.txt
with header lines like Network Info:, System Summary:, and
tab-indented - Key: Value records under each. First documented
in early 2023, StealC has remained an active commodity stealer
with the v2 rewrite tracked through 2024.
Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.
3 variants recorded for this malware
| ID | Data collected | Confidence |
|---|---|---|
078dda1... | 972,136 | High |
1761580... | 165 | High |
27c6033... | 1 | High |
To see more variants, organizations should use dedicated solutions such as CyStack Threat Intelligence
Network Info:- Country: <value>System Summary:- HWID: <value>- OS: <value>- Architecture: <value>- UserName: <value>- Computer Name: <value>- Local Time: <value>- UTC: <value>- Language: <value>- Keyboards: <value>- Laptop: <value>- Running Path: <value>- CPU: <value>- Cores: <value>- Threads: <value>- RAM: <value>- Display Resolution:Device Name: <value>Device String: <value>Resolution: <value>Color Depth: <value>- GPU:Process count: <value>Process List:Installed Apps:All Users:MTA:<value>Current User:
